Open Source Community Unites to Build EU CRA-Compliant Cybersecurity Processes

Open Source Community Unites to Build EU CRA-Compliant Cybersecurity Processes
news.apache.org

"cookie banners for everyone" -> cookie banners only if your website is using cookies in a way that needs a cookie banner. There are plenty of sites or web analytics technologies that don't mandate the use of a cookie banner.

"GDPR nightmare for everyone" -> only for companies that intend touse personal data in non-ethical ways (cf. for instance: https://www.iccl.ie/digital-data/europes-hidden-security-cri... ).

"now this new government rule on opensource contributors to software being held liable for security breaches." -> Indeed, that's problematic, specially the way this was (not) discussed with the open source sector. Cf. https://cnll.fr/news/la-france-doit-prot%C3%A9ger-sa-fili%C3... and https://cnll.fr/news/declaration-cra-cyber-resilience-act/ (two texts that I wrote, in French, last year).

With the same logic EU had tried to make Micro USB mandatory for everyone, it was a very poorly executed charging port which would break often and easily.

If it was made industry standard back then, USB-C would have probably never come along or would have taken much much longer.

The road to hell is paved with good intention, I doubt any decent government (which EU is) would pass laws that is bad for its people in short term.

It’s just that these burden some regulations backfire in the long term.

The problems with GDPR and Cookie Banner are well documented, it puts EU startups at a disadvantage because of having to pass all regulations before they can innovate and get up from the ground. Regulations like this should not apply to startups, the harm done to economy is far more than harm done to the public.

Or else , EU citizens will forever be left using American Software, driving Japanese cars (EU car makers are in decline), use Chinese and American Robots (Largest German Robot company (KUKA Robotics) sold to China), use Chinese Solar Panels, Korean Phones, etc.

I get what you’re saying, it all sounds sweet and good on paper.

But it ends up being a race where brilliant european minds are running with 20kg weights on their shoes, while other major nations are supplying stimulants for their innovators to win the gold medal.

It’s just the reality of what’s happening, if it continues EU will die a slow and painful death (Saying the truth as a well wisher for europe, they are pro-consumer in great many ways, but they are over regulating and hurting their next generation)

That's the state of our industry today. In some ways, Open source seems among the better students of the class. In other ways, Open source is like a million people each contributing a few parts to a society critical factory, nobody noticing how big we grew. Of course that makes people uneasy.

I think something like this is unavoidable. How to get the max impact with minimal overhead is the most important discussion now, so I applaud apache's initiative.